Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CCD20BC525C11F09382248CDAE4EC9C.roa
File: 8CCD20BC525C11F09382248CDAE4EC9C.roa (raw, json)
Hash identifier: Cq8MVWVhSIsgGZYRwfvbeN6KKgPfK3xkntFgGv2QV60=
Subject key identifier: 3C:43:B0:2E:34:58:56:AB:6A:54:15:F6:10:75:C9:5C:67:95:A5:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01891B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CCD20BC525C11F09382248CDAE4EC9C.roa
Signing time: Thu 26 Jun 2025 07:09:51 +0000
ROA not before: Thu 26 Jun 2025 07:09:46 +0000
ROA not after: Wed 17 Sep 2025 07:09:46 +0000
asID: 142002
IP address blocks: 154.198.160.0/24 maxlen: 24
154.198.161.0/24 maxlen: 24
154.198.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100635 (0x1891b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:09:46 2025 GMT
Not After : Sep 17 07:09:46 2025 GMT
Subject: CN=685cf23e-906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:c0:34:6e:2e:45:da:75:d2:08:8b:6d:f3:
1b:2c:3d:36:66:34:dc:09:b9:04:bb:b9:98:0b:29:
69:b6:37:9c:8e:32:e7:6a:79:bf:f1:50:97:3e:0d:
ae:bc:ec:a0:99:dd:e3:72:78:b1:01:49:d0:1d:b4:
11:5b:1a:11:26:8e:e0:35:bf:90:6d:a6:af:73:d2:
53:96:62:7d:f6:48:dd:4c:12:96:15:3e:6d:a7:f8:
6b:92:d3:71:fe:7b:8e:01:a9:20:5b:d7:42:ef:f5:
e1:12:82:ca:a8:c0:45:b4:80:4b:ff:ed:47:11:fa:
5f:7f:4e:2f:0b:7a:c6:94:12:ea:e6:cc:c8:f3:a7:
02:c7:ab:73:9c:eb:67:9e:a5:06:14:b7:28:e0:3a:
b6:b7:08:73:d5:e4:1a:74:aa:47:0d:d7:04:0b:39:
5b:a9:8a:1d:4b:85:b4:2d:cc:4e:e5:e4:85:36:b3:
ef:e5:31:b1:d8:24:ca:70:d8:02:1e:00:0d:ca:a2:
69:e9:7d:77:ff:5e:dd:71:bd:61:6e:2f:f1:ef:33:
45:f1:36:56:9c:42:c1:c0:15:5d:ac:00:72:5a:67:
84:26:f2:5e:56:b8:b9:6d:19:96:64:90:f3:44:ee:
95:4b:73:6a:a0:0c:26:02:3e:64:c7:f3:d3:87:d8:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:B0:2E:34:58:56:AB:6A:54:15:F6:10:75:C9:5C:67:95:A5:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CCD20BC525C11F09382248CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.160.0-154.198.162.255
Signature Algorithm: sha256WithRSAEncryption
81:36:f6:9f:6b:4d:a1:70:ec:c2:85:94:a4:5c:da:74:f8:56:
c5:93:41:71:15:43:4e:a9:37:7a:71:c7:61:5c:50:82:88:f9:
93:46:80:ad:43:7c:36:d9:74:4f:aa:bb:bc:09:e2:40:75:03:
51:91:81:f2:dd:46:da:5c:3f:98:72:5d:99:64:0d:35:f3:33:
0d:af:75:be:68:23:4a:43:53:e4:be:db:f0:3b:90:7b:d8:04:
c1:2b:fb:61:4e:d5:50:e1:57:2a:3a:ed:30:7f:87:f8:9f:05:
d9:6b:15:a3:40:6b:0d:74:cb:86:b9:c4:7e:03:64:35:41:8a:
09:f2:5b:a0:98:a7:5d:31:06:d1:46:d8:8f:4a:28:38:06:b1:
61:17:6c:e6:7f:2c:31:ba:fe:c0:ef:b6:d3:44:c0:e2:6b:07:
eb:8e:8b:d0:0b:fd:8a:d0:18:51:14:ac:bc:9c:0f:60:c6:80:
5d:ae:45:56:65:e3:9f:b8:90:9a:2f:17:c7:26:45:8a:56:89:
5c:01:f0:b0:1c:3a:d4:88:df:7d:64:e2:3a:46:7c:bb:1e:09:
83:cf:89:be:ca:d0:2d:f7:6b:f0:37:89:c2:c0:8f:40:3d:ec:
33:7a:71:96:44:23:5c:c9:2f:f1:4c:19:cd:01:f7:2a:64:96:
99:20:b5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:12:58 2025 by rpki-client